Intranet/internet restriction

I want to setup user level restriction in winnt so that one user has access to internet as well as intranet and the other does not have to internet. iam using exchange5.5 as my email server and firewall as gateway to connect to my ISP.